This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3231342e302f32342d3234203d3e203532323533.roa
File:                     3139302e3130382e3231342e302f32342d3234203d3e203532323533.roa (raw, json)
Hash identifier:          dl2fD1QtJDXW02V+K+MpasNtYPcemmwzR7THN5IoG0I=
Subject key identifier:   CA:CD:CD:7D:33:57:D6:69:D4:B9:73:06:EF:D6:53:5C:95:E4:57:52
Certificate issuer:       /CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
Certificate serial:       13BE5E7ECC7FCFC09D1841CD980E132486D03D7C
Authority key identifier: 43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3231342e302f32342d3234203d3e203532323533.roa
Signing time:             Tue 06 Jan 2026 19:23:40 +0000
ROA not before:           Tue 06 Jan 2026 19:18:40 +0000
ROA not after:            Tue 05 Jan 2027 19:23:40 +0000
asID:                     52253
IP address blocks:        190.108.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Feb 2026 15:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:be:5e:7e:cc:7f:cf:c0:9d:18:41:cd:98:0e:13:24:86:d0:3d:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
        Validity
            Not Before: Jan  6 19:18:40 2026 GMT
            Not After : Jan  5 19:23:40 2027 GMT
        Subject: CN=CACDCD7D3357D669D4B97306EFD6535C95E45752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:40:14:45:ca:a9:64:fa:97:e3:e8:1c:d9:bd:
                    64:32:7b:1a:dd:d4:11:bf:5b:a9:a3:46:88:7f:10:
                    fe:a1:b7:a1:fc:e0:74:03:a7:f2:c2:09:97:a3:ba:
                    5d:9d:c0:c5:f5:12:56:a0:fb:65:4d:25:12:0a:d8:
                    72:96:29:42:60:51:0b:6f:94:11:63:22:cb:af:54:
                    9a:60:c3:23:08:df:69:d4:aa:14:cd:c2:94:00:8a:
                    12:ad:2f:dc:92:88:3c:53:9f:c2:6e:c2:57:f6:ae:
                    c5:7f:9a:23:61:8a:69:8b:a1:b8:ca:cc:7d:25:d6:
                    2b:42:0c:f7:4b:56:2c:69:cf:97:d6:fe:fe:b4:20:
                    f0:02:8d:f4:85:07:da:ad:53:89:02:d9:82:5c:e7:
                    9a:69:d1:46:d2:e5:7a:1f:3e:81:83:f2:0e:b6:24:
                    cf:cf:1c:ee:be:0b:92:6e:52:8f:e1:72:2c:ae:73:
                    18:0c:77:75:24:be:96:c2:83:95:a9:3e:7d:1f:de:
                    65:37:b8:ce:a6:b0:d2:c7:6a:f0:e8:d5:f3:bf:b3:
                    5a:b3:42:9b:04:79:91:28:d2:c2:2d:2e:95:5c:61:
                    09:87:1b:de:30:ec:10:6e:37:a1:26:99:7e:bc:46:
                    0d:b8:00:75:10:37:b9:bf:da:f7:8d:b6:db:7d:79:
                    ca:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:CD:CD:7D:33:57:D6:69:D4:B9:73:06:EF:D6:53:5C:95:E4:57:52
            X509v3 Authority Key Identifier:
                keyid:43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3231342e302f32342d3234203d3e203532323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:26:25:f5:66:52:a2:7d:5c:9f:8f:36:e9:d4:1e:b4:26:d6:
         f2:2d:41:e7:85:c1:39:c9:0a:18:e7:91:cb:87:44:84:ef:fd:
         a2:f5:bb:81:f7:d2:a2:47:b9:b4:b5:ee:e2:e7:44:7a:1e:53:
         cd:d7:bf:73:3a:5e:15:57:89:c4:40:ac:81:ad:a2:f9:82:0f:
         4b:97:13:58:ee:0e:e5:b5:a5:82:2c:f9:8d:13:47:0f:6c:7e:
         5c:f8:88:51:c5:f8:9a:95:45:ee:51:e6:d6:fb:59:ac:36:97:
         64:c5:d5:02:14:44:df:bb:30:0d:e7:e2:c4:9d:60:34:45:36:
         ed:f2:f2:e1:d2:9e:89:be:29:22:15:86:4e:92:e9:1d:28:71:
         b3:ea:96:24:62:ba:42:aa:af:dc:8b:17:1f:5e:b5:83:9f:f6:
         7e:2c:8c:13:6b:f8:07:35:6a:1c:80:50:21:4f:04:e5:1c:ca:
         ef:91:c8:ea:2a:ac:8e:6d:51:fe:1f:1e:d5:89:33:eb:9e:5c:
         bf:f2:25:85:64:dd:a1:6b:ef:ea:63:ae:0d:14:0e:06:9c:d2:
         62:2a:a3:17:69:9c:12:0d:41:49:6d:e3:b8:50:a2:82:d8:3e:
         77:34:16:54:fa:3c:a6:5c:f9:50:ac:90:f0:f2:65:42:de:d7:
         3c:1f:f2:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:19:22 2026 by rpki-client